CVE-2026-57829

MEDIUM 6.1CVE-2026-57829 · Published 13/07/2026 · updated 24/10/2026

In short

CVE-2026-57829 is a MEDIUM (CVSS 6.1) vulnerability affecting helix ultimate (ollyo).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
helix ultimate ollyo	`≥ 1.0, ≤ 2.2.6`	No fix yet

Description

Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

References

joomshaper.com/joomla-templates/helixultimate · Product

More vulnerabilities in helix ultimate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free